Add GitHub Actions workflow for go coverage job

Author: AlanGreene

.github/workflows/go-coverage.yml

@@ -0,0 +1,61 @@
+name: Go coverage
+
+permissions:
+  contents: read
+
+on:
+  pull_request:
+    branches: ["main"]
+  push:
+    branches: ["main"]
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  go-coverage:
+    name: Go coverage
+    runs-on: ubuntu-24.04
+    permissions:
+      pull-requests: write
+    # container:
+    #   image: ghcr.io/tektoncd/plumbing/coverage:latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          path: ${{ github.workspace }}/src/github.com/tektoncd/chains
+
+      - name: Generate coverage
+        working-directory: ${{ github.workspace }}/src/github.com/tektoncd/chains
+        # -covermode=count
+        run: |
+          go test -cover -coverprofile=coverage.txt ./... || true
+          echo "Generated coverage profile"
+
+      # - name: Run go-coverage
+      #   working-directory: ${{ github.workspace }}/src/github.com/tektoncd/chains
+      #   run: |
+      #     /coverage --profile-name=coverage_profile.txt --cov-target=. --cov-threshold-percentage=0
+
+      - name: Archive coverage results
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        working-directory: ${{ github.workspace }}/src/github.com/tektoncd/chains
+        with:
+          name: code-coverage
+          path: coverage.txt
+
+      - name: Comment on PR
+        if: github.event_name == 'pull_request' # Do not run when workflow is triggered by push to main branch
+        uses: fgrosse/go-coverage-report@8c1d1a09864211d258937b1b1a5b849f7e4f2682 # v1.2.0
+        continue-on-error: true # This may fail if artifact on main branch does not exist (first run or expired)
+        with:
+          coverage-artifact-name: "code-coverage"
+          coverage-file-name: "coverage.txt"